Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. 2025/12/12 14:23:48 parsed 1 programs [ 70.085199][ T4279] cgroup: Unknown subsys name 'net' [ 70.198040][ T4279] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.275578][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.282092][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.493897][ T4279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 72.920845][ T4295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.930338][ T4295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.938047][ T4295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.948161][ T4295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.955794][ T4295] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.963076][ T4295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.345470][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 74.392607][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.400744][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.408918][ T4326] device bridge_slave_0 entered promiscuous mode [ 74.424220][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.431321][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.439082][ T4326] device bridge_slave_1 entered promiscuous mode [ 74.470592][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.481569][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.503215][ T4326] team0: Port device team_slave_0 added [ 74.511572][ T4326] team0: Port device team_slave_1 added [ 74.532506][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.539611][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.565692][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.578654][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.586825][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.613001][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.649466][ T4326] device hsr_slave_0 entered promiscuous mode [ 74.656451][ T4326] device hsr_slave_1 entered promiscuous mode [ 74.755839][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.765723][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.775180][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.785228][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.838784][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.846443][ T4326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.854273][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.861337][ T4326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.915490][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.928548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.938878][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.948384][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.957365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 74.976779][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.988323][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.997676][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.004812][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.026096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.036573][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.043728][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.071815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.081422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.093960][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.106541][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.126704][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.138127][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.296788][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.304360][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.317937][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.340119][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.349689][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.369102][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.377719][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.387857][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.395975][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.406481][ T4326] device veth0_vlan entered promiscuous mode [ 75.423248][ T4326] device veth1_vlan entered promiscuous mode [ 75.444468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.453134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.461418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.470888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.482619][ T4326] device veth0_macvtap entered promiscuous mode [ 75.492218][ T4326] device veth1_macvtap entered promiscuous mode [ 75.510021][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.517862][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.526511][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.535418][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.545074][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.557551][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.565563][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.576580][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.588687][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.598085][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.607001][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.615900][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.773766][ T2906] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.084927][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.103897][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.112983][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.137934][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.146617][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.157045][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.405029][ T41] cfg80211: failed to load regulatory.db 2025/12/12 14:23:57 executed programs: 0 [ 77.077843][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.085831][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.094526][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.102270][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.110369][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.117904][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.222397][ T4373] chnl_net:caif_netlink_parms(): no params data found [ 77.261603][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.268903][ T4373] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.277047][ T4373] device bridge_slave_0 entered promiscuous mode [ 77.285972][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.293204][ T4373] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.300904][ T4373] device bridge_slave_1 entered promiscuous mode [ 77.322652][ T4373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.334328][ T4373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.357490][ T4373] team0: Port device team_slave_0 added [ 77.366320][ T4373] team0: Port device team_slave_1 added [ 77.383204][ T4373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.390182][ T4373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.416344][ T4373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.428304][ T4373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.435529][ T4373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.461946][ T4373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.493268][ T4373] device hsr_slave_0 entered promiscuous mode [ 77.499977][ T4373] device hsr_slave_1 entered promiscuous mode [ 77.506596][ T4373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.515145][ T4373] Cannot create hsr debugfs directory [ 78.163329][ T2906] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.193684][ T4295] Bluetooth: hci0: command 0x0409 tx timeout [ 80.462319][ T2906] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.544790][ T2906] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.273513][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 81.382078][ T4373] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.399363][ T2906] device hsr_slave_0 left promiscuous mode [ 81.406764][ T2906] device hsr_slave_1 left promiscuous mode [ 81.414271][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.421771][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.430078][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.437928][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.445643][ T2906] device bridge_slave_1 left promiscuous mode [ 81.452429][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.465360][ T2906] device bridge_slave_0 left promiscuous mode [ 81.471805][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.490448][ T2906] device veth1_macvtap left promiscuous mode [ 81.496761][ T2906] device veth0_macvtap left promiscuous mode [ 81.502886][ T2906] device veth1_vlan left promiscuous mode [ 81.508827][ T2906] device veth0_vlan left promiscuous mode [ 81.777748][ T2906] team0 (unregistering): Port device team_slave_1 removed [ 81.803737][ T2906] team0 (unregistering): Port device team_slave_0 removed [ 81.828071][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.854589][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.076738][ T2906] bond0 (unregistering): Released all slaves [ 82.130117][ T4373] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.139640][ T4373] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.148381][ T4373] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.216998][ T4373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.228770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.236781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.256394][ T4373] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.266389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.275944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.285195][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.292262][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.300954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.328643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.337751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.347328][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.354494][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.362204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.371139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.380045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.390529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.399858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.412111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.421013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.431930][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.441565][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.466651][ T4373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.477881][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.485916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.495181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.709525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.718527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.734913][ T4373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.750291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.759492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.776288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.784914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.794932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.803664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.815004][ T4373] device veth0_vlan entered promiscuous mode [ 82.825256][ T4373] device veth1_vlan entered promiscuous mode [ 82.840969][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.849347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.858058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.866974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.877441][ T4373] device veth0_macvtap entered promiscuous mode [ 82.886802][ T4373] device veth1_macvtap entered promiscuous mode [ 82.901282][ T4373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.909634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.917992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.925986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.934640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.947923][ T4373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.955567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.964973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.975576][ T4373] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.984381][ T4373] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.993657][ T4373] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.002331][ T4373] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.057772][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.067183][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.095833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.105277][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.114148][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.138292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.184545][ T4425] loop0: detected capacity change from 0 to 64 [ 83.212111][ T26] audit: type=1800 audit(1765549443.366:2): pid=4425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 83.356123][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 83.816908][ T4425] [ 83.819280][ T4425] ============================================ [ 83.825417][ T4425] WARNING: possible recursive locking detected [ 83.831557][ T4425] syzkaller #0 Not tainted [ 83.835951][ T4425] -------------------------------------------- [ 83.842077][ T4425] syz.0.17/4425 is trying to acquire lock: [ 83.847857][ T4425] ffff88807a25c0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 83.857155][ T4425] [ 83.857155][ T4425] but task is already holding lock: [ 83.864499][ T4425] ffff88807a25c0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 83.873784][ T4425] [ 83.873784][ T4425] other info that might help us debug this: [ 83.881821][ T4425] Possible unsafe locking scenario: [ 83.881821][ T4425] [ 83.889247][ T4425] CPU0 [ 83.892501][ T4425] ---- [ 83.895757][ T4425] lock(&tree->tree_lock/1); [ 83.900418][ T4425] lock(&tree->tree_lock/1); [ 83.905073][ T4425] [ 83.905073][ T4425] *** DEADLOCK *** [ 83.905073][ T4425] [ 83.913201][ T4425] May be due to missing lock nesting notation [ 83.913201][ T4425] [ 83.921597][ T4425] 5 locks held by syz.0.17/4425: [ 83.926516][ T4425] #0: ffff88807a25a460 (sb_writers#13){.+.+}-{0:0}, at: do_sys_ftruncate+0x27b/0x3c0 [ 83.936084][ T4425] #1: ffff88807db282a8 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: do_truncate+0x183/0x220 [ 83.946426][ T4425] #2: ffff88807db280f8 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280 [ 83.957113][ T4425] #3: ffff88807a25c0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 83.966847][ T4425] #4: ffff88807a3000f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280 [ 83.978050][ T4425] [ 83.978050][ T4425] stack backtrace: [ 83.983929][ T4425] CPU: 1 PID: 4425 Comm: syz.0.17 Not tainted syzkaller #0 [ 83.991107][ T4425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.001154][ T4425] Call Trace: [ 84.004423][ T4425] [ 84.007342][ T4425] dump_stack_lvl+0x168/0x22e [ 84.012014][ T4425] ? show_regs_print_info+0x12/0x12 [ 84.017211][ T4425] ? load_image+0x3b0/0x3b0 [ 84.021705][ T4425] __lock_acquire+0x122f/0x7c50 [ 84.026550][ T4425] ? mark_lock+0x94/0x320 [ 84.030873][ T4425] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 84.036754][ T4425] ? verify_lock_unused+0x140/0x140 [ 84.041952][ T4425] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 84.047830][ T4425] ? _raw_spin_unlock+0x40/0x40 [ 84.052669][ T4425] ? stack_trace_save+0x98/0xe0 [ 84.057512][ T4425] ? __stack_depot_save+0x421/0x460 [ 84.062703][ T4425] lock_acquire+0x1b4/0x490 [ 84.067203][ T4425] ? hfs_find_init+0x15b/0x1d0 [ 84.071955][ T4425] ? hfs_extend_file+0x2eb/0x1280 [ 84.076967][ T4425] ? hfs_bmap_reserve+0x103/0x420 [ 84.081982][ T4425] ? block_write_begin+0x96/0x1e0 [ 84.086995][ T4425] ? __might_sleep+0xd0/0xd0 [ 84.091576][ T4425] ? hfs_write_begin+0x87/0xd0 [ 84.096331][ T4425] ? read_lock_is_recursive+0x10/0x10 [ 84.101692][ T4425] ? do_truncate+0x197/0x220 [ 84.106269][ T4425] ? do_sys_ftruncate+0x312/0x3c0 [ 84.111277][ T4425] ? do_syscall_64+0x4c/0xa0 [ 84.115858][ T4425] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.121920][ T4425] __mutex_lock+0x120/0xaf0 [ 84.126416][ T4425] ? hfs_find_init+0x15b/0x1d0 [ 84.131172][ T4425] ? hfs_find_init+0x15b/0x1d0 [ 84.135928][ T4425] ? mutex_lock_nested+0x10/0x10 [ 84.140859][ T4425] ? __kmem_cache_alloc_node+0x140/0x260 [ 84.146481][ T4425] ? hfs_find_init+0x84/0x1d0 [ 84.151345][ T4425] ? hfs_find_init+0x84/0x1d0 [ 84.156182][ T4425] ? __kmalloc+0xe1/0x240 [ 84.160509][ T4425] hfs_find_init+0x15b/0x1d0 [ 84.165088][ T4425] hfs_extend_file+0x2eb/0x1280 [ 84.169932][ T4425] ? hfs_ext_keycmp+0x1c3/0x310 [ 84.174773][ T4425] ? hfs_get_block+0xbd0/0xbd0 [ 84.179530][ T4425] ? hfs_rename+0x320/0x320 [ 84.184021][ T4425] ? hfs_find_exit+0xa0/0xa0 [ 84.188602][ T4425] ? hfs_brec_find+0x3d6/0x510 [ 84.193369][ T4425] hfs_bmap_reserve+0x103/0x420 [ 84.198222][ T4425] __hfs_ext_write_extent+0x1fa/0x470 [ 84.203586][ T4425] __hfs_ext_cache_extent+0x6b/0x9b0 [ 84.208860][ T4425] ? hfs_find_init+0x15b/0x1d0 [ 84.213613][ T4425] hfs_extend_file+0x313/0x1280 [ 84.218456][ T4425] ? filemap_get_folios+0xe6/0x750 [ 84.223564][ T4425] ? hfs_get_block+0xbd0/0xbd0 [ 84.228317][ T4425] ? filemap_get_folios+0xe6/0x750 [ 84.233417][ T4425] ? find_lock_entries+0xb90/0xb90 [ 84.238521][ T4425] ? clean_bdev_aliases+0x649/0x730 [ 84.243709][ T4425] hfs_get_block+0x3d4/0xbd0 [ 84.248293][ T4425] ? hfs_free_extents+0x430/0x430 [ 84.253307][ T4425] ? do_raw_spin_unlock+0x11d/0x230 [ 84.258500][ T4425] ? create_page_buffers+0x24f/0x4a0 [ 84.263777][ T4425] __block_write_begin_int+0x54b/0x1a70 [ 84.269316][ T4425] ? filemap_add_folio+0x188/0x3c0 [ 84.274413][ T4425] ? xas_load+0x127/0x140 [ 84.278737][ T4425] ? hfs_free_extents+0x430/0x430 [ 84.283750][ T4425] ? page_zero_new_buffers+0x650/0x650 [ 84.289200][ T4425] ? PageHeadHuge+0x8f/0x1c0 [ 84.293774][ T4425] ? hfs_free_extents+0x430/0x430 [ 84.298793][ T4425] block_write_begin+0x96/0x1e0 [ 84.303633][ T4425] ? hfs_free_extents+0x430/0x430 [ 84.308647][ T4425] cont_write_begin+0x5c4/0x7d0 [ 84.313502][ T4425] ? generic_cont_expand_simple+0x1f0/0x1f0 [ 84.319387][ T4425] ? __block_commit_write+0x2d4/0x400 [ 84.324750][ T4425] ? put_page+0xea/0x270 [ 84.328983][ T4425] hfs_write_begin+0x87/0xd0 [ 84.333563][ T4425] ? hfs_free_extents+0x430/0x430 [ 84.338579][ T4425] cont_write_begin+0x2a9/0x7d0 [ 84.343426][ T4425] ? generic_cont_expand_simple+0x1f0/0x1f0 [ 84.349320][ T4425] ? lockdep_hardirqs_on+0x94/0x140 [ 84.354508][ T4425] hfs_write_begin+0x87/0xd0 [ 84.359360][ T4425] ? hfs_free_extents+0x430/0x430 [ 84.364402][ T4425] hfs_file_truncate+0x18d/0x9b0 [ 84.369371][ T4425] ? unmap_mapping_range+0x91/0x100 [ 84.374574][ T4425] ? __up_read+0x27c/0x660 [ 84.378984][ T4425] ? hfs_extend_file+0x1280/0x1280 [ 84.384089][ T4425] ? preempt_count_add+0x8d/0x190 [ 84.389103][ T4425] ? unmap_mapping_range+0x91/0x100 [ 84.394296][ T4425] hfs_inode_setattr+0x4ab/0x6f0 [ 84.399231][ T4425] ? security_inode_setattr+0xd8/0x140 [ 84.404678][ T4425] ? try_break_deleg+0x79/0x120 [ 84.409517][ T4425] ? hfs_evict_inode+0x100/0x100 [ 84.414446][ T4425] notify_change+0xc74/0xf40 [ 84.419030][ T4425] do_truncate+0x197/0x220 [ 84.423436][ T4425] ? put_page_bootmem+0x2c0/0x2c0 [ 84.428466][ T4425] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 84.433759][ T4425] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 84.440005][ T4425] ? bpf_lsm_path_truncate+0x5/0x10 [ 84.445205][ T4425] do_sys_ftruncate+0x312/0x3c0 [ 84.450047][ T4425] do_syscall_64+0x4c/0xa0 [ 84.454458][ T4425] ? clear_bhb_loop+0x60/0xb0 [ 84.459123][ T4425] ? clear_bhb_loop+0x60/0xb0 [ 84.463791][ T4425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.469673][ T4425] RIP: 0033:0x7f1c77b8f749 [ 84.474091][ T4425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.493692][ T4425] RSP: 002b:00007ffde622e998 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 84.502101][ T4425] RAX: ffffffffffffffda RBX: 00007f1c77de5fa0 RCX: 00007f1c77b8f749 [ 84.510066][ T4425] RDX: 0000000000000000 RSI: 0000000006000000 RDI: 0000000000000004 [ 84.518022][ T4425] RBP: 00007f1c77c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 84.525979][ T4425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.533935][ T4425] R13: 00007f1c77de5fa0 R14: 00007f1c77de5fa0 R15: 0000000000000002 [ 84.541984][ T4425] [ 84.545039][ C1] sched: RT throttling activated [ 85.432807][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 88.233210][ T33] kworker/u4:2: attempt to access beyond end of device [ 88.233210][ T33] loop0: rw=1048577, sector=161, nr_sectors = 1 limit=64 [ 88.247020][ T33] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 88.255591][ T33] kworker/u4:2: attempt to access beyond end of device [ 88.255591][ T33] loop0: rw=1048577, sector=162, nr_sectors = 1 limit=64 [ 88.269356][ T33] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 88.277936][ T33] kworker/u4:2: attempt to access beyond end of device [ 88.277936][ T33] loop0: rw=1048577, sector=163, nr_sectors = 1 limit=64 [ 88.291673][ T33] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 88.300293][ T33] kworker/u4:2: attempt to access beyond end of device [ 88.300293][ T33] loop0: rw=1048577, sector=167, nr_sectors = 1 limit=64 [ 88.314224][ T33] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 88.322856][ T33] kworker/u4:2: attempt to access beyond end of device [ 88.322856][ T33] loop0: rw=1048577, sector=169, nr_sectors = 1 limit=64 [ 88.336771][ T33] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 88.345345][ T33] kworker/u4:2: attempt to access beyond end of device [ 88.345345][ T33] loop0: rw=1048577, sector=171, nr_sectors = 1 limit=64 [ 88.359111][ T33] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 88.367663][ T33] kworker/u4:2: attempt to access beyond end of device [ 88.367663][ T33] loop0: rw=1048577, sector=172, nr_sectors = 1 limit=64 [ 88.381398][ T33] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 88.389941][ T33] kworker/u4:2: attempt to access beyond end of device [ 88.389941][ T33] loop0: rw=1048577, sector=173, nr_sectors = 1 limit=64 [ 88.403919][ T33] Buffer I/O error on dev loop0, logical block 173, lost async page write [ 88.412446][ T33] kworker/u4:2: attempt to access beyond end of device [ 88.412446][ T33] loop0: rw=1048577, sector=174, nr_sectors = 1 limit=64 [ 88.426347][ T33] Buffer I/O error on dev loop0, logical block 174, lost async page write [ 88.435267][ T33] kworker/u4:2: attempt to access beyond end of device [ 88.435267][ T33] loop0: rw=1048577, sector=175, nr_sectors = 1 limit=64 [ 88.449100][ T33] Buffer I/O error on dev loop0, logical block 175, lost async page write